Introduction
At LyricFloat (“LyricFloat,” “we,” “us,” or “our”), we take your privacy and data protection seriously. We believe desktop utility software should be built with transparency, restraint, and privacy-by-design principles. We do not harvest your listening habits, we do not track your web browsing activity, and we do not monetize, rent, or sell your personal information.
A fundamental architectural principle of our service is that LyricFloat is designed to keep normal playback synchronization and desktop/browser communication local when possible, while remote services are primarily used for purchase verification, licensing, authentication, security, and protected software delivery.
This Privacy Policy explains what information LyricFloat collects, processes, and retains when you visit our website at lyricfloat.com, purchase a LyricFloat software license, download and activate the desktop application, install and use our companion browser extension, pair your web browsers, access our device-management portal, or communicate with our support team. It also describes your privacy rights and the security controls we implement to safeguard your data.
Information This Policy Covers
This Privacy Policy applies to personal information collected through our official digital touchpoints:
- The LyricFloat Website: Our marketing pages, documentation, download portal, and self-service device-management interface located at lyricfloat.com;
- Checkout and Licensing Services: The purchase flow, order fulfillment, customer verification, and license key generation systems operated in conjunction with our authorized merchant of record, Polar;
- License Activation & Device Services: Our edge API endpoints that authenticate customer purchase emails, issue one-time passcodes (OTPs), record active device bindings, deliver installer packages via Cloudflare R2, and process device removals;
- The Desktop Application: The locally installed LyricFloat client application running on your supported Windows computer;
- The Companion Browser Extension: The official LyricFloat browser extension (compatible with Google Chrome, Microsoft Edge, Brave, and other modern Chromium-based browsers) that observes media playback in authorized browser tabs; and
- Customer Communications: Direct communications sent to our official support email at support@lyricfloat.com.
This policy does not govern independent third-party websites, music streaming services, or external lyric sources that you connect to or visit outside of LyricFloat’s direct systems.
Information You Provide
We collect information that you directly and voluntarily provide to us when interacting with our software and services:
- Purchase Email Address: When purchasing LyricFloat through Polar or when requesting license access on our download page, you provide your valid email address. This email serves as your customer identifier for purchase verification, digital receipt delivery, license key lookup, installer access, and device management;
- Verification Codes: When authenticating your purchase, downloading installer files, or managing your devices, our system generates a six-digit one-time passcode (OTP) transmitted to your email, which you enter into our web form;
- Support Inquiries: If you contact us via email for technical assistance, bug reports, or refund inquiries, we receive your email address, your name or handle (if included in your email headers), and the contents of your message, including any voluntary system diagnostics, error logs, or screenshots you choose to share.
LyricFloat does not require you to create a traditional password-based account, nor do we request phone numbers, physical home addresses, government identification numbers, or social media profile credentials.
Purchase Information
Financial transactions for LyricFloat are conducted through our authorized merchant of record and checkout provider, Polar (Polar Software, Inc., polar.sh). When you complete a purchase of LyricFloat:
- Payment Credentials Handled Exclusively by Polar: Polar directly collects and processes your payment card number, expiration date, card security code (CVV/CVC), billing address, and regional tax identification where required. This sensitive payment data is transmitted directly to Polar’s secure, PCI-DSS compliant payment infrastructure. LyricFloat never receives, views, processes, or stores your raw payment card numbers or banking credentials on our servers.
- Order Metadata Received by LyricFloat: Upon successful order completion, Polar provides our server with structured transaction metadata necessary to fulfill your license: an internal Polar order ID, the checkout ID, the date and time of purchase, the purchase amount and currency, the customer email address associated with the order, the generated license key, and the product entitlement. We store and query this metadata to confirm your entitlement when you download the application and activate your devices.
License and Device Information
To enforce our two-device concurrent license limit and enable self-service device management without invading your personal privacy, LyricFloat utilizes a privacy-preserving cryptographic device registration system:
- Random Installation Identifier: When LyricFloat is installed on your computer, the application generates a random 64-character hexadecimal installation identity. This identifier is generated randomly; it is not derived from hardware serial numbers, MAC addresses, motherboard UUIDs, CPU serial numbers, or persistent hardware fingerprints.
- Local P-256 Cryptographic Device Identity: The Windows desktop application generates a local P-256 (ECDSA P-256) cryptographic device identity using native Windows secure key storage. The private P-256 device key remains strictly on your computer and is never exported, transmitted, received, or stored by LyricFloat or our servers. Only the corresponding public key and cryptographic challenge proofs are sent to our activation service during device registration to authenticate the physical computer.
- Cloudflare Device Bindings: In our secure Cloudflare database, we maintain an active device registration associating your installation’s random device ID and public key with your license record and Polar activation details. Server-side licensing stores only derived and public device information strictly necessary to identify an activated computer and enforce license limits.
- Polar Activation Metadata: Within Polar’s licensing system, active device allocations are registered with a secure hash of your device identifier, the public key, and a friendly platform label (such as “Windows device”). This allows you to recognize your devices in the management portal without storing hardware serials.
- Ephemeral Verification Records: During verification and device-removal flows, our database temporarily stores short-lived challenge tokens and device tickets that are automatically deleted upon consumption or expiration.
- Separate Limits for Physical Devices and Browser Pairings: Up to two (2) activated physical computers are permitted per license. Pairing browser profiles on an activated computer (as detailed in Section 6) operates locally through our desktop bridge and does not register additional physical device activations or consume your two-computer hardware allowance.
Technical Architecture & Local Playback Privacy
A core architectural principle of LyricFloat is that your media consumption remains completely private on your local computer. We do not operate a remote listening tracker, media logger, or user profiling database.
Authenticated Extension-to-Desktop Local Bridge (127.0.0.1 / localhost)
The companion browser extension and the desktop application communicate across an authenticated local connection (127.0.0.1 / localhost). This local connection is used for desktop presence detection, authenticated bridge communication, playback and lyrics synchronization, Launch / Show / Hide overlay controls, and active playback state reporting. This local traffic ordinarily remains strictly on your machine and is inaccessible from the public internet:
- Trusted Extension Pairing: A trusted LyricFloat extension browser profile pairs silently with LyricFloat Desktop. Only explicitly configured extension identities can pair; arbitrary websites and untrusted extension origins cannot claim a pairing.
- Unique Local Pairing Credential: Upon pairing, the desktop application generates a unique local pairing credential stored securely in extension-private storage on your device. Approved browser profiles use local pairing credentials and HMAC-style authenticated communication. This pairing system ensures that unauthorized local web pages or third-party extensions cannot send unauthenticated commands to the desktop bridge.
- Authenticated Reconnections: Subsequent connections require authenticated challenge-response verification. Unverified connections or invalid requests are rejected. Removing or uninstalling the browser extension may remove its locally stored pairing credential, while the desktop application may retain an approved browser-pairing record until explicitly revoked.
- Local Pairing Limits: A single physical computer supports up to ten (10) paired browser or profile clients (for instance, personal, work, and secondary Chromium profiles). Pairing profiles on the same computer operates locally and does not consume physical device license activations.
- Single Playback Controller: When multiple paired browsers or profiles are running, LyricFloat evaluates active playback ownership locally so that only one playback source controls the floating lyrics display at any given time.
Website Isolation (No Automatic Localhost Probing)
When you visit the LyricFloat website at lyricfloat.com, the website itself does not scan, probe, or open direct connections to your local machine. Instead, web-based status indicators and display settings communicate strictly via secure in-page messaging (window.postMessage) with the locally installed companion extension, which acts as the sole authorized relay to the desktop app. If the extension is not installed or the desktop application is not paired, no local network communication occurs.
Playback Privacy & Remote Telemetry
LyricFloat is intentionally engineered so that LyricFloat does not collect or harvest your listening history:
- Playback Information Accessed: When you play media on supported services (such as YouTube, YouTube Music, or Spotify), LyricFloat accesses only the specific playback signals necessary to provide synchronized floating lyrics: the current track or video title, artist name, playback position / timeline progress, play and pause state, and media player signals needed to align lyric timestamps.
- No Browsing History or Unrelated Website Access: LyricFloat does not collect, inspect, or log your full browsing history, and does not read data from unrelated websites. Host permissions for the browser extension are strictly host-specific (including optional host permissions for YouTube and YouTube Music pages granted during onboarding, while Spotify playback is observed locally via desktop media session and transport controls).
- Local Processing: Playback data is processed locally in real time on your machine across the internal desktop bridge. LyricFloat does not transmit song or video titles, artist names, playlist URLs, or continuous playback telemetry to LyricFloat-operated servers for analytics, tracking, or profiling.
- Direct Third-Party Lyric Lookups: To find and synchronize lyrics, the desktop application may send limited track metadata (such as song title, artist name, and track duration) directly from your computer to third-party lyric, metadata, or caption sources, as described in Section 20. These requests are made directly between your local device and the external providers to retrieve matching text; they are not routed through LyricFloat tracking systems.
Website Information
The LyricFloat website at lyricfloat.com is designed as a fast, clean, informative portal. We maintain a strict policy against surveillance advertising and intrusive tracking:
- We do not deploy third-party advertising tracking pixels (such as Meta / Facebook Pixel, TikTok pixel, or Google Ads remarketing tags);
- We do not run invasive behavioral session-recording scripts (such as Hotjar or FullStory);
- We do not partner with data brokers or credit-reporting agencies; and
- We do not serve third-party banner advertisements or commercial tracking scripts on our pages.
How Information Is Used
We collect and process personal data exclusively for specified, legitimate business and technical purposes:
- Fulfilling Orders and Providing Downloads: Delivering access to the LyricFloat desktop installer, verifying that an email holds a valid license, and generating signed download sessions for installer binaries hosted on Cloudflare R2;
- License Activation & Validation: Authenticating customer installation attempts, issuing cryptographic authorization tokens, and enforcing the two-device concurrent activation limit;
- Device Management: Allowing customers to view active devices, review registration dates, and remove older or retired computers via our self-service portal, freeing capacity only after the removal operation safely completes;
- Security & Abuse Prevention: Detecting fraudulent transactions, defending against distributed denial-of-service attacks, enforcing rate limits, and mitigating automated code-generation abuse;
- Customer Support: Diagnosing installation difficulties, troubleshooting activation errors, responding to inquiries, and processing authorized refunds; and
- Legal & Tax Compliance: Maintaining accurate transaction records to satisfy commercial record-keeping, corporate accounting, tax auditing, and consumer warranty regulations.
License Verification & Purchaser Email Data
To access downloads and activate your software without requiring account passwords, LyricFloat employs a passwordless email verification workflow. We process purchaser email addresses exclusively for purchase verification, one-time passcode (OTP) delivery, license ownership confirmation, Manage Devices authorization, and security or recovery operations:
- You enter your purchase email address on our website or activation interface;
- Our backend verifies that the format is valid, performs rate-limiting checks, and confirms whether an active purchase entitlement exists in our licensing records;
- If valid, an automated transactional email containing a secure six-digit verification code (OTP) is generated and delivered to your address via our transactional email provider (Brevo);
- A cryptographic hash of the verification code and request ID is stored in Cloudflare KV with a strict 10-minute expiration timer (TTL). OTP codes are temporary security credentials and are never permanently retained;
- When you submit the six-digit code, our server validates the code using timing-safe comparison routines. Once validated, an encrypted, HttpOnly session cookie is established, authorizing access to installer downloads or device registration.
This verification mechanism is designed to authenticate that only the recipient of the verification code can authorize new devices or manage active activations.
Fraud and Abuse Prevention
We deploy targeted technical safeguards to protect our customers, our intellectual property, and our cloud infrastructure against malicious interference:
- Automated Rate Limiting: We enforce rate limits on sensitive endpoints (including OTP code requests, verification attempts, checkout initiations, and device deactivations). Excessive requests trigger temporary cooling-off periods;
- Bot & Honeypot Detection: Form submissions incorporate invisible honeypot parameters that automated spambots routinely populate, allowing us to quietly reject automated submissions without storing bogus verification records;
- Purchase Duplicate Guards: Our database includes automated transactional guards that detect rapid concurrent checkouts for identical customer emails, safeguarding customers from accidental duplicate purchases;
- Failure-Only Diagnostic Logging: When an activation fails, our edge workers emit minimal structured telemetry recording the error category, failure phase, and correlation ID. Crucially, personal emails, device secrets, and raw request payloads are never serialized in diagnostic logs.
Service Providers
LyricFloat works with a select group of established, enterprise-grade cloud service providers to operate our infrastructure. Each vendor is bound by data processing terms restricting their use of personal data solely to delivering their contracted service:
- Polar Software, Inc. (United States / Global): Provides merchant of record services, checkout hosting, payment processing, tax calculation, invoicing, and license key record management;
- Cloudflare, Inc. (United States / Global): Provides content delivery network (CDN) edge caching, Cloudflare Pages static web hosting, Cloudflare Workers serverless compute, Cloudflare KV key-value storage, Cloudflare D1 SQL database storage, Cloudflare R2 object storage for secure software package distribution, and DDoS protection;
- Brevo / Sendinblue (European Union / Global): Provides transactional email delivery infrastructure for transmitting six-digit OTP verification codes and device-removal notices.
Polar
Because Polar acts as the merchant of record for LyricFloat software purchases, Polar collects and manages your billing information under its own privacy policies and security controls. We encourage you to review Polar’s public documentation and privacy policy at polar.sh/legal/privacy.
When you initiate a refund, dispute a transaction, or require a formal VAT/tax invoice for your corporate accounting, Polar securely processes these adjustments and synchronizes the resulting license state with our licensing endpoints.
Hosting and Infrastructure (Cloudflare Server Data)
Our website, edge API functions, databases, and key-value storage are hosted on Cloudflare’s globally distributed edge network (including Cloudflare Pages, Workers, D1 SQL databases, KV key-value storage, and R2 protected object storage). Cloudflare operates hundreds of points of presence worldwide.
The categories of data processed and stored on our server infrastructure are strictly limited to technical licensing and security necessities:
- Purchaser and License State: Purchaser email address, Polar order and license identifiers, and entitlement status;
- Physical-Device Bindings: Random 64-character device identifiers, public P-256 cryptographic keys, activation identifiers, and license binding records;
- Device Metadata: User-friendly platform metadata (such as “Windows device” and registration timestamps) to allow identification in the management portal without storing hardware serials;
- Activation Identifiers & Challenges: Cryptographic challenge parameters and short-lived device activation tickets;
- Entitlement & Reconciliation State: Status flags to confirm active, revoked, or updated license standing;
- Temporary Authorization & Session Records: Short-lived download authorizations and device-management sessions;
- OTP & Replay-Protection Records: Temporary hashed verification codes, request contexts, and rate-limiting counters with strict expiration timers; and
- Durable Device-Removal Operation State: Temporary operation journals used to coordinate deactivations reliably between Cloudflare D1 and Polar, ensuring an activation slot is released only after the deactivation successfully completes.
All communication with LyricFloat servers is encrypted in transit using modern Transport Layer Security (TLS 1.2 and TLS 1.3) protocols. Data at rest stored in Cloudflare D1 databases and Cloudflare KV is encrypted using industry-standard encryption algorithms. Cloudflare complies with leading industry standards including SOC 2 Type II, ISO 27001, and PCI-DSS requirements.
Data Sharing & No Commercial Sale
We do not sell, rent, lease, trade, or share your personal information with third parties for commercial marketing or advertising purposes. Specifically:
- LyricFloat does not sell personal information.
- LyricFloat does not use purchaser or license information for third-party behavioral advertising.
We share personal data only in the following strictly limited operational circumstances:
- With Authorized Service Providers: Sharing purchase identifiers, email addresses, and cryptographic device bindings with Polar, Cloudflare, and Brevo solely as necessary to operate checkout, deliver transactional emails, and maintain active software licensing;
- For Legal and Regulatory Compliance: Disclosing information when we have a good faith belief that disclosure is required by a valid subpoena, court order, search warrant, statutory audit, or applicable government regulation;
- Protection of Rights and Safety: Disclosing information where necessary to investigate potential fraud, enforce our Terms of Use, protect the security or integrity of our systems, or defend against legal claims; and
- Business Transfers: In the event of a merger, acquisition, reorganization, sale of business assets, or transition of service, customer licensing records and associated email addresses may be transferred as an essential part of the business assets, subject to the recipient honoring this Privacy Policy.
Data Retention
We retain personal information only for as long as necessary to fulfill the specific purposes outlined in this Privacy Policy:
- Customer License Records: Your purchase email address, license key, purchase date, and order identifier are retained in Polar and our backend for the active lifetime of your software license, allowing you to access software downloads and manage your activations;
- Active Device Bindings & Removal Operations: Device registration records (random installation ID, public key, and activation timestamp) are retained in our database for as long as that specific device remains actively bound to your license. When a device is deactivated via our portal, durable removal operation state coordinates deactivation with Polar, and the binding record is permanently deleted upon verified completion;
- Ephemeral Verification Data: One-time passcode (OTP) verification hashes in Cloudflare KV automatically expire and are purged after 10 minutes. Ephemeral device tickets are purged after 15 minutes;
- Rate-Limiting Counters: Temporary IP and email rate-limiting keys in Cloudflare KV automatically expire within 10 to 15 minutes;
- Support Communications: Inquiries sent to our support inbox are retained for ongoing customer service reference, resolution tracking, and warranty verification, typically for a period of up to three (3) years unless earlier deletion is requested; and
- Accounting & Tax Records: Core transactional invoices and order summaries maintained by Polar are retained in compliance with statutory financial and tax record-keeping requirements (typically 7 to 10 years).
Security
LyricFloat implements technical and organizational safeguards designed to protect your personal data against accidental loss, unauthorized access, disclosure, alteration, and destruction:
- No Passwords Stored: By utilizing passwordless, cryptographically signed one-time passcodes, we eliminate the risk of customer password database breaches, credential reuse, and credential stuffing;
- P-256 Cryptographic Device Identity: Physical computer activations rely on locally generated P-256 asymmetric cryptographic keys. Private keys remain strictly on your machine and are never transmitted or stored remotely, avoiding invasive hardware serial numbers;
- Local Bridge Security: Browser-to-desktop communication is restricted to an authenticated local loopback connection (127.0.0.1 / localhost), pairs trusted extension profiles, and validates connections using HMAC challenge-response verification with credentials held in extension-private storage;
- Protected Software Downloads: Software installer packages hosted on Cloudflare R2 are accessible exclusively via short-lived, cryptographically signed download URLs generated after license verification;
- Secure Cookie Architecture: Web session cookies use the hardened
__Host-prefix, mandating that cookies are sent exclusively over HTTPS (Secure), cannot be read by client-side JavaScript (HttpOnly), and are locked to the exact top-level domain with strict cross-site request restrictions (SameSite=StrictorSameSite=Lax); - Modern Security Headers: Our web endpoints enforce strict Content Security Policies (CSP), Frame Options (
DENY), Content-Type Options (nosniff), and strict Referrer Policies; and - Cryptographic Hashing: Sensitive temporary tokens, device references, and verification codes are hashed before storage in key-value tables.
While we apply rigorous security controls, no internet transmission or electronic storage method can be guaranteed to be 100% impenetrable. We encourage you to maintain security updates on your devices and protect access to your email account.
International Processing
Because LyricFloat serves customers worldwide and utilizes cloud infrastructure provided by Cloudflare, Polar, and Brevo, your information may be transferred to, stored, and processed in jurisdictions outside of your home country or state, including the United States and member states of the European Union.
Data protection laws in these countries may differ from the laws applicable in your jurisdiction. Where personal data originating in the European Economic Area (EEA), the United Kingdom, or Switzerland is transferred internationally, our service providers utilize recognized legal transfer mechanisms, such as Standard Contractual Clauses (SCCs) approved by the European Commission or participation in the EU-U.S. Data Privacy Framework, to ensure an adequate level of data protection.
Your Choices and Rights
Depending on your geographic location and applicable data protection legislation (such as the EU/UK General Data Protection Regulation (GDPR) or California Consumer Privacy Act / CPRA), you may have certain statutory rights regarding your personal information:
- Right of Access & Portability: You have the right to request confirmation of whether we process your personal data and to receive a copy of your licensing and device records in an accessible format;
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal records (such as updating an obsolete email address on your license);
- Right to Erasure (“Right to be Forgotten”): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our statutory obligations to maintain transaction records for tax and legal compliance;
- Self-Service Device Management: You can view registered physical computers and initiate device removals at any time by visiting lyricfloat.com/manage-devices/. Device removal requires step-up purchaser authorization via an email OTP code. Deactivating a physical device frees an activation slot only after the removal operation safely completes. Removing an active device deauthorizes that installation without deleting your software purchase itself; and
- Right to Restrict or Object to Processing: You may object to or request the restriction of certain processing activities under applicable statutory grounds.
To exercise any of these privacy rights, please contact us by email at support@lyricfloat.com. We will respond to authenticated requests within the timeframes established by applicable law (typically within 30 days).
Children’s Privacy
LyricFloat is a desktop software utility intended for general audiences and is not directed to children under the age of thirteen (13), or under the age of sixteen (16) where applicable under European Union or member state privacy laws. We do not knowingly solicit, collect, or maintain personal information from children.
If you are a parent or legal guardian and believe that your child has provided personal information to LyricFloat without appropriate parental consent, please contact us immediately at support@lyricfloat.com so that we can promptly investigate and delete the information from our systems.
Third-Party Services & Lyrics Sources
When you use LyricFloat alongside third-party platforms such as YouTube, YouTube Music, or Spotify, or when the desktop application queries public lyric databases for synchronized text, you are interacting with third-party software and internet services.
Direct Outbound Lyric Queries
To find and display synchronized lyric text matching your active playback, the LyricFloat desktop application queries third-party lyric, metadata, or caption sources directly from your computer:
- These queries contain only the technical song search parameters necessary to locate matching lyrics: the song title, artist name, and track duration.
- These requests are outbound HTTP queries made directly between your local computer and the third-party providers. They do not route through LyricFloat-operated proxy servers, and LyricFloat does not log, monitor, or profile your queries.
- Each third-party lyric, metadata, or caption source processes incoming web queries under its own terms and privacy practices.
Media Streaming Services
Music streaming services (such as YouTube, YouTube Music, or Spotify) collect and process data in accordance with their own independent privacy notices, cookie policies, and terms of service. For example, media classification queries made from your browser to YouTube endpoints originate directly from your browser session to Google servers, subject to Google’s privacy policy. We encourage you to review the privacy policies of the music streaming and video services you use to understand their data practices.
Cookies, Storage & Extension Permissions
LyricFloat uses a minimal, strictly necessary set of cookies, local storage technologies, and browser permissions. We do not use advertising cookies, third-party tracking cookies, or cross-site tracking beacons.
Cookies Deployed on Our Website
__Host-lf_download: An encrypted, HttpOnly session cookie established upon successful email verification on the download page. It maintains your authorized download state so you can retrieve your installer packages without re-verifying on every page refresh. It expires automatically after 90 days, usesSameSite=Lax, and is transmitted exclusively over HTTPS;__Host-lf_session: A short-lived, encrypted, HttpOnly session cookie established when logging into the device-management portal or performing step-up activation actions. It expires automatically after 15 minutes, usesSameSite=Strict, and is transmitted exclusively over HTTPS.
Web Browser Storage (Local & Session Storage)
- Session Storage: The website utilizes browser
sessionStorageto store tab-local activation diagnostics. These temporary records track protocol steps during activation handshakes with the local desktop app, survive tab redirects, contain no credentials or sensitive payloads, and are wiped when the browser tab is closed; - Browser Extension Local Storage: The companion browser extension uses extension-private/local browser storage strictly to save your user display preferences (such as selected font styles, display modes, lyric alignment, and transparency presets) and your unique local bridge pairing credential, kept isolated from normal web pages.
Browser Extension Permissions
The companion browser extension requests a minimal set of browser permissions designed solely to observe media playback and relay timing to the desktop overlay:
- Optional Media Host Permissions (
youtube.com,music.youtube.com): Requested optionally and explicitly during onboarding to read media playback titles, artist names, and player timestamps from active media tabs. The extension does not read your personal account passwords, search histories outside media pages, or private messages; - Storage Permission (
storage): Used strictly to persist your visual layout preferences and your local bridge authentication credential; - Scripting Permission (
scripting): Used to register lightweight content scripts on approved media tabs to detect playback changes; and - Local Loopback Permission: Required to establish the authenticated local connection (127.0.0.1 / localhost) between the browser extension and LyricFloat Desktop on your computer.
Changes to This Privacy Policy
We may update or revise this Privacy Policy periodically to reflect enhancements in our software, updates to our cloud infrastructure, changes in service providers, or modifications to statutory legal requirements. When revisions are published, we will update the version date at the bottom of this document.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of LyricFloat after the publication of revised terms constitutes your acknowledgment of the updated policy.
Contact
If you have any questions, comments, concerns, or statutory requests regarding this Privacy Policy, our data practices, or the security of your personal data, please contact our privacy and support team directly:
Privacy & Support Email: support@lyricfloat.com
We aim to respond to all inquiries and data protection requests promptly and thoroughly.
Last updated: October 10, 2026 (version: October 2026)
